feat: hugo-content-workspace + hugo-content-airouter harnesses

New context: hugo-content-workspace/v1
- init.sh: clones hugo-{customer}-content at HUGO_CONTENT_BRANCH and
  hugo-{customer}-integration at main via gitea-ssh-accelerators
- finalize.sh: detects changes, commits content repo first then
  integration repo; skips silently if no changes
- CLAUDE.md: instructs the agent to work in /workspace/content/

New composite: hugo-content-airouter/v1
- Combines airouter/v1 + gitea-ssh-accelerators/v1 + hugo-content-workspace/v1
- Label-gated to airouter dispatchers (ESO secret required)

Used by cms-proxy /ai/{customer}/draft endpoint.

harnesses/contexts/hugo-content-workspace/v1/harness.yaml

@@ -0,0 +1,19 @@
+kind: context
+name: hugo-content-workspace
+version: 1
+description: "Hugo site workspace: clone content + integration repos, auto-commit changes on exit"
+requires: [git-access]
+provides: [hugo-workspace]
+
+scripts:
+  init: "./init.sh"
+  finalize: "./finalize.sh"
+
+env:
+  # Injected by dispatcher from task project_id — set as HUGO_CUSTOMER
+  HUGO_CUSTOMER: ""
+  # Branch to check out in the content repo. Pass via runtime.env in the task.
+  HUGO_CONTENT_BRANCH: "staging"
+  AGENT_WORKING_DIR: "/workspace/content"
+
+secrets_required: []